Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft
File:                     7qM-huKBrRPcYp8y2NU3YK4dAEc.mft (raw, json)
Hash identifier:          QOTMeNhpVLpST3qed/wDhhvZkttbKfwBPg8Bd7LaNkQ=
Subject key identifier:   D7:DD:16:1C:04:AF:22:8D:81:93:1D:62:C3:82:2E:37:71:8D:AB:C7
Authority key identifier: EE:A3:3E:86:E2:81:AD:13:DC:62:9F:32:D8:D5:37:60:AE:1D:00:47
Certificate issuer:       /CN=A91F30AE/serialNumber=EEA33E86E281AD13DC629F32D8D53760AE1D0047
Certificate serial:       04E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qM-huKBrRPcYp8y2NU3YK4dAEc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft
Manifest number:          04E1
Signing time:             Sun 19 Oct 2025 01:33:08 +0000
Manifest this update:     Sun 19 Oct 2025 01:33:08 +0000
Manifest next update:     Sun 26 Oct 2025 01:33:08 +0000
Files and hashes:         1: 7qM-huKBrRPcYp8y2NU3YK4dAEc.crl (hash: NIq1BFIoPSvv4VDMYXycxX3urfIsgJ0hgpJReDf1UlM=)
                          2: 84CEFB0E379111EC92DB9A48C4F9AE02.roa (hash: 1ALWg1Qlo5IyGVR2E3WZposvdzb9mETdXX2ZGs91bhg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.crl
                          rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qM-huKBrRPcYp8y2NU3YK4dAEc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 01:33:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1254 (0x4e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F30AE, serialNumber=EEA33E86E281AD13DC629F32D8D53760AE1D0047
        Validity
            Not Before: Oct 19 01:33:08 2025 GMT
            Not After : Oct 26 01:33:08 2025 GMT
        Subject: CN=68f43fd4-f902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:dd:4b:04:39:e8:d5:e7:5c:c0:91:b7:c7:8d:
                    b6:7b:4a:5a:aa:30:49:84:f4:60:d4:45:33:98:85:
                    ba:b6:33:54:1e:54:8b:e4:c8:ba:ac:87:fb:dc:c1:
                    84:f0:4b:cf:98:92:e9:4a:b1:7b:11:c4:8d:e5:01:
                    6e:4f:d7:21:a9:97:3c:7a:60:60:5f:19:0b:1d:1c:
                    18:4f:b2:6a:5b:8d:c7:79:91:dc:6c:74:d1:8c:26:
                    6a:b7:87:19:bd:e8:c6:22:f1:9b:ba:4d:90:2e:43:
                    31:8c:78:ec:c0:54:48:6d:ba:30:a0:bc:00:fd:99:
                    5b:88:1f:35:76:ee:fa:5b:06:74:1c:90:25:1b:3c:
                    75:8c:92:da:63:37:91:29:82:fa:4f:46:85:b6:57:
                    d7:cd:c7:a9:81:b1:c2:53:e3:a6:5d:76:0d:ef:dc:
                    7b:48:85:6e:74:d1:c6:3f:7b:87:6e:59:18:a0:6a:
                    49:39:60:b5:52:b7:97:36:8f:fe:b6:58:a3:20:1e:
                    4a:9e:3b:10:a2:df:e4:03:84:6f:41:ed:f0:94:77:
                    85:e9:c6:db:b3:24:d2:f6:96:ae:0b:c0:b9:1d:89:
                    83:25:d6:40:ee:99:e9:46:ba:24:0e:2c:25:08:db:
                    f1:a8:ae:a2:78:f5:e8:13:8f:72:94:c4:6a:28:d1:
                    b5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:DD:16:1C:04:AF:22:8D:81:93:1D:62:C3:82:2E:37:71:8D:AB:C7
            X509v3 Authority Key Identifier:
                keyid:EE:A3:3E:86:E2:81:AD:13:DC:62:9F:32:D8:D5:37:60:AE:1D:00:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qM-huKBrRPcYp8y2NU3YK4dAEc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:e4:9d:83:de:8f:9d:95:ee:0c:ff:88:f7:a7:2d:31:9c:72:
         35:c7:46:54:0a:4e:1e:71:03:25:e6:30:de:68:0e:b8:61:77:
         98:6a:6d:50:9d:3f:82:e9:e0:b0:cf:ea:33:df:40:4d:c9:3e:
         6d:32:0b:d1:57:48:01:7a:cd:05:71:06:14:95:c2:8e:da:db:
         da:a8:fc:ca:c7:64:c5:3c:dc:cf:6a:7b:74:70:59:68:24:2f:
         93:ae:c7:30:6b:a0:4a:1e:90:31:00:a9:68:11:46:63:82:5b:
         28:53:08:1a:b1:ca:33:5e:f1:40:98:c0:14:8f:4b:21:0d:1c:
         61:78:d9:a9:d6:13:73:16:b5:8d:bc:70:e7:41:e5:ce:20:f9:
         86:43:5d:fb:9b:df:ca:c8:92:ed:fd:fa:66:1a:02:0f:83:1c:
         b0:9d:a0:ae:86:df:44:13:eb:9e:e9:57:90:78:c0:cc:23:1a:
         37:2f:31:60:25:57:c6:db:b5:fb:00:02:7c:87:df:31:8e:06:
         17:8a:f9:d5:9c:0e:92:8a:3b:16:9a:9b:a2:c5:25:38:42:6b:
         64:8d:ef:c2:d1:6c:94:4b:37:74:61:bd:b2:fa:5a:d5:86:fa:
         7b:00:16:e6:ed:4d:93:a2:01:01:a8:c0:2f:d3:de:a0:77:ae:
         45:3d:03:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:49:07 2025 by rpki-client